ENKR

Conduent business services data breach (2025)

Add to my breach check

62,224,658 people

What leaked8

Hard to replace

  • Driver's licence number
  • Bank account number
  • Home or delivery address
  • Other profile data

Permanent

  • Health information
  • Social Security number
  • Date of birth
  • Full name
  • Health informationmedical information
  • Bank account numberfinancial information · account number, credit or debit card number; the filing does not say which
  • Other profile datahealth insurance information

To-dos6 · about 1 h 30 min in all

  1. Freeze your credit at Equifax, Experian and TransUnionabout 30 minfreeStops: credit in your name (opens in a new tab)
  2. Get an IRS Identity Protection PINabout 20 minStops: tax refund fraud (opens in a new tab)
  3. Place a fraud alert on your credit reportsabout 10 minfreeLimits harm from: credit in your name (opens in a new tab)
  4. Check your credit reports every week, freeabout 20 minfreeHelps you notice: credit in your name (opens in a new tab)
  5. Turn on instant transaction alertsabout 5 minHelps you notice: bank account fraud
  6. Freeze your NCTUE phone and utility fileabout 10 minfreeLimits harm from: phone or utility account (opens in a new tab)

What happened next10 events

  1. Undetected 2 events84 days · show events
  2. Response 7 eventsNotice in 284 days · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. Disputes 1 eventOngoing · show events
  1. Federal class actions over the breach consolidated as In re Conduent Business Services Data Breach Litigation · D.N.J.
  2. Conduent's notice to affected people: no known attempted or actual misuse of the information
  3. Breach report to the Washington attorney general: 786,927 Washington residents
  4. Notice letters by first-class mail, plus website and media notice
  5. Breach report to HHS as a business associate: 62,224,658 people · count as listed in October 2026
5 more
  1. SEC filing confirming that files associated with a limited number of clients were taken
  2. The SafePay ransomware group claimed the attack and said it took 8.5 TB of data
  3. Found it was the victim of a cyber incident; the intruder had access from October 21, 2024
  4. Told the press that an operational disruption was due to a third-party compromise
  5. Intrusion began
Company
Conduent
When it happened
–
Company detected it
Notice
Leak confirmed
Affected
62,224,658 people · Conduent's breach report to HHS, as listed on October 23, 2026; its Washington filing lists 786,927 Washington residents

How the facts developed

  1. Conduent's revised filing with the Texas attorney general (BR-0005045, published May 20, 2026) adds addresses, driver's licence numbers, financial information and dates of birth to names, Social Security numbers, medical and health insurance information

Sources